mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 19:44:57 +00:00
Also let mailq setuid.
Simialr to showq
This commit is contained in:
@@ -221,7 +221,7 @@
|
||||
condition: proc.name in (coreutils_binaries, user_mgmt_binaries)
|
||||
|
||||
- list: mail_binaries
|
||||
items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq]
|
||||
items: [sendmail, sendmail-msp, postfix, procmail, exim4, pickup, showq, mailq]
|
||||
|
||||
- list: sendmail_config_binaries
|
||||
items: [
|
||||
|
Reference in New Issue
Block a user